Privacy Policy

KrashBoard is a sports betting research and analytics platform available at krashboard.app. It is operated by KrashWagers, based in Ontario, Canada, which is responsible for your personal information. This policy explains what personal information we collect, why we collect it, who we share it with, and how you can have it removed. It covers the website, including the free pages you can use without an account, and the KrashBoard Discord bot.

KrashBoard is for adults only. You must be at least 21 years old to use it. We do not knowingly collect information from anyone under 21.

1. Information We Collect

Account information. Your email address, and a password if you create one directly with us. If you sign in with Discord or Google instead, we receive the account identifier, email address, username and avatar that the provider returns to us. If you upload a profile picture or set a handle and display name, we store those too.

Discord information. If you link a Discord account, we store your Discord user ID and a record of whether you hold one of our qualifying roles in the KrashBoard Discord server. Section 3 explains this in full.

Billing information. Subscriptions are processed by Stripe. Stripe collects and stores your card details directly. We never see or store your full card number. We keep a customer identifier, your subscription status, and the plan you are on.

Content you create. Saved views, filter presets, bet slips, picks, ratings, and any other input you save into the product, stored against your account.

Bets you log. If you use the Bet Tracker, we store the bets you choose to enter: the sportsbook, the market, the odds, your stake, the payout, the result, and any notes or tags you add. You type this in yourself. We have no connection to your sportsbook accounts and never receive betting data from them.

Preferences. Settings such as your sportsbooks, odds format, favorite sport, unit size, and the US state you choose so we can show which sportsbooks operate there.

Messages and applications. If you contact support or apply to our partner program, we keep your name, email address, and what you send us. This applies even if you do not have an account.

Technical and usage data. Pages viewed, features used, IP address, browser and device type, and timestamps. We use this to keep the service running, understand which tools get used, and investigate errors and abuse.

Error diagnostics. We use Sentry to catch crashes and bugs. When something goes wrong, Sentry receives a report that can include the page you were on, your IP address, browser details, details of the request, and your account identifier if you are signed in. This is used only to find and fix faults. We do not record or replay your browsing sessions.

Referrals. If you arrive through a partner's referral link, our referral provider Rewardful sets a cookie recording which partner sent you, so that partner can be credited if you subscribe.

2. How We Use Your Information

We use your information to create and secure your account, verify whether you are entitled to free or premium access, deliver the analytics tools you use, process and renew subscription payments, send account and service emails, respond to support requests, credit partner referrals, diagnose errors, and detect fraud or abuse of the service.

We do not sell your personal information. We do not share it with advertisers or data brokers, and we do not use it to build advertising profiles.

Artificial intelligence. We do not send your personal information or the content you create to AI providers, and we do not use it to train AI models. We use an AI model only to read public sports information, such as published team lineups.

What other users can see. Some features are public. If you set a handle, your profile page shows your handle, display name, avatar, and the picks, ratings and results you track there, and these can appear on leaderboards. Community parlays you post are visible to other users. Email us if you want your profile made private or shared content removed.

3. Discord Data

Members of the KrashBoard Discord server get access to the website, and members holding a premium role get premium access. To make that work, KrashBoard needs to confirm your membership and roles in our server.

When you link your Discord account and request verification, we ask the Discord API whether your Discord user ID is a member of the KrashBoard server, and which roles you hold there. We check that answer only against our own list of qualifying role IDs.

What we store outside Discord. With your KrashBoard sign-in record we store your Discord user ID and true or false flags for whether you are verified and hold a qualifying role. If you signed in with Discord, the email address, username and avatar Discord returned at sign-in are kept as part of that sign-in record. We do not store your full role list, your server nickname, your friends, your messages, message content, or your presence or activity status. We do not read messages, and our app does not request the Message Content or Presence intents.

Why we store it. The Discord user ID is the link between your Discord account and your KrashBoard account. Without it we cannot tell that the person signing in is the same person who holds the role, and your access would break on every visit.

Who we share it with. No one. Discord data is not sold, not shared with third parties, and not used for any purpose other than granting and maintaining your access to KrashBoard.

How long we keep it. For as long as your KrashBoard account exists. If you leave the Discord server or lose the role, the stored flag is set to false at your next verification and premium access ends. If you delete your KrashBoard account, the stored Discord identifiers are deleted with it. You can also email us to have your Discord data removed while keeping your account, though you will lose Discord-based access.

4. Service Providers

We share information with the providers below, only to the extent they need it to run the service on our behalf. Each has its own privacy policy that also applies.

Supabase for authentication, database and profile picture storage. Vercel for hosting and aggregate traffic analytics. Stripe for payment processing. Sentry for error monitoring. Resend for forwarding support messages by email. Upstash for caching and rate limiting, which briefly stores IP addresses to stop abuse. Rewardful for partner referral tracking. Anthropic for AI processing of public sports information only, never your personal data. Discord and Google as optional sign-in providers.

We may also disclose information where we are legally required to, or where it is necessary to protect our rights, our users, or the security of the service.

5. How Long We Keep Your Data

Account and subscription data is kept while your account is open, and for a period afterwards where we need it for tax, accounting or dispute records. Error reports and rate-limit records are kept on a rolling basis and age out automatically. Support messages and partner applications from people without an account are kept until you ask us to remove them. Billing records held by Stripe are retained under their own policy and applicable financial regulations.

6. Your Rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete your account and the data attached to it, or ask us to remove your Discord data specifically. Depending on where you live, you may also have the right to object to or restrict certain processing, or to lodge a complaint with your data protection authority. In Canada, that is the Office of the Privacy Commissioner of Canada. You can withdraw your consent to our use of your information at any time by deleting your account, though we will no longer be able to provide the service to you.

Email contact@krashboard.app and we will action the request within 30 days. If you ask for a copy of your data, we will send it in a common, machine-readable format.

You can also delete your account yourself from the settings page. Deleting your account cancels any active subscription immediately and deletes your profile, profile picture, preferences, saved content, logged bets, picks, support messages, and stored Discord identifiers. Stripe keeps its own billing records as financial law requires, and error reports age out on their normal schedule.

California residents. You have the right to know what personal information we collect and how we use it, to get a copy, to correct it, and to delete it. We do not sell or share personal information for advertising, and we will not treat you differently for using these rights.

7. Security

Data is transmitted over encrypted connections and stored with providers that encrypt data at rest. Access to production data is limited to people who need it to operate the service. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify affected users of a breach involving their personal data without undue delay.

8. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences (such as your home sport and sidebar layout), and credit partner referrals through Rewardful. Our traffic analytics, from Vercel, are aggregate and do not use cookies. We do not use advertising or cross-site tracking cookies. You can clear cookies from your browser, but doing so will sign you out.

9. International Users

KrashBoard is operated from Canada. Most of our service providers store and process data in the United States, and some in other countries. While your information is there, it is protected by our agreements with those providers but is also subject to the laws of that country, and may be accessed by its courts or authorities under those laws. By using the service, you understand that your information will be transferred outside the country where you live.

10. Changes to This Policy

We may update this policy as the product changes. The date at the top of this page shows when it was last revised. If we make a material change to how we handle your data, we will notify account holders by email or through the site.

11. Contact

KrashWagers has a designated person responsible for privacy, who handles every request and complaint. Questions, requests, or complaints about this policy? Email contact@krashboard.app.